Certified Information Security Manager (CISM) — Question 48

Which of the following is the GREATEST inherent risk when performing a disaster recovery plan (DRP) test?

Answer options

• A. Lack of communication to affected users
• B. Poor documentation of results and lessons learned
• C. Lack of coordination among departments
• D. Disruption to the production environment

Correct answer: D

Explanation

The greatest inherent risk when testing a disaster recovery plan is disruption to the production environment, as it can lead to significant operational issues. While lack of communication, poor documentation, and lack of coordination are important, they do not pose as immediate a threat to the business continuity as directly interrupting production operations.